Abstract: A method of simultaneous multiuser collaborative access to a spreadsheet includes transmitting the spreadsheet to a first device of a first user having a first privilege for a first part that includes a first cell, transmitting the spreadsheet to a second device of a second user having a second privilege for a second part, receiving a first edit of the first cell from the first device, and a second edit of the second cell from the second device, and in response to the first cell and the second cell being different, the first privilege including an edit privilege, and the second privilege including the edit privilege, accepting the first edit, accepting the second edit, forwarding the first edit for display with the first cell at the second device, and providing, to the second device, a real-time visual indication identifying the first user as a last user editing the first part.

Abstract: Apparatuses, methods, and systems are disclosed for modifying a data connection. One apparatus includes a processor, a first interface supporting a first data connection with a 5G core network over a first access and a second interface that communicates with a UE over a second access. The processor receives a request to establish a second data connection with the UE and determines whether the second data connection can be mapped into one of a plurality of QoS flows established over the first data connection. The processor sends a request to establish a new QoS flow over the first data connection upon determining that the second data connection cannot be mapped into an existing QoS flow of the first data connection and relays traffic between the second data connection and the new QoS flow over the first data connection.

Abstract: A BGP route identification method and apparatus are provided. A network device obtains a BGP route. The BGP route includes an autonomous system path attribute AS_PATH attribute, the AS_PATH attribute includes a first autonomous system number AS number, an AS number corresponding to an autonomous system that the network device is located in or manages is a second AS number, and the first AS number is equal to the second AS number. The network device determines, based on the first AS number and the second AS number, whether the BGP route is abnormal.

Abstract: Methods and systems disclosed herein describe generating virtual backgrounds for video communications. A virtual background generator may monitor a user's calendar and/or inbox for meetings. The virtual background generator may analyze the context of calendar invites and/or scheduled meetings to generate one or more virtual backgrounds for a video conference. A first background may be displayed for the video conference. Additionally, the virtual background generator may update the virtual background based on an analysis of one or more topics being discussed during the video conference. Based on the analysis of the one or more topics being discussed, the virtual background generator may generate a second virtual background to replace the first virtual background.

Abstract: Embodiments relate to a routing information processing method and apparatus. The method implemented by a first network device includes: obtaining a local route corresponding to a second network device, where the local route includes a first identifier; allocating a first segment identifier based on the fact that the first identifier exists only in the local route; obtaining a local route and a remote route that correspond to a third network device, where each of the local route and the remote route includes a second identifier; allocating a second segment identifier based on the fact that the second identifier exists at least in the local route and the remote route; and sending routing information including the first segment identifier and the second segment identifier. This avoids traffic interruption of a failure-free single-homed network device in a scenario in which single-homing and multi-homing coexist.

Abstract: A path calculation method, apparatus, and device, to implement network slicing. The path calculation method includes: obtaining an algorithm constraint supported by each of a plurality of network devices, where the algorithm constraint is a constraint of a forwarding path algorithm, and the forwarding path algorithm is used to calculate, for the network device, a forwarding path that meets the algorithm constraint; performing network topology division on the plurality of network devices, where network devices in a same network topology support a same algorithm constraint; and calculating a forwarding path between network devices in each network topology based on the algorithm constraint, of the forwarding path algorithm, corresponding to the network topology.

Abstract: A first network node in a communication network can evaluate whether to scale a first resource of a network slice of the communication network. The first network node can receive, from a second network node of the communication network, a first message indicating a request for approval to scale the first resource of the network slice. Responsive to receiving the first message, the first network node can determine whether to scale the first resource of the network slice based on information regarding a second resource. The first and second resources may be of different types. The first network node can transmit, to the second network node, a second message indicating whether to scale the first resource of the network slice based on determining whether to scale the first resource of the network slice. Related methods are also discussed.

Abstract: The present disclosure provides a method in a network node implementing a Service Communication Proxy, SCP, function. The method includes: receiving, from a first Network Function, NF, a request destined to a second NF, wherein the request comprises information on the second NF; redirecting the request to a third NF, wherein the redirected request comprises information on the third NF; and transmitting a response to the first NF, wherein the response comprises the information on the third NF.

Abstract: A CPU implements a virtual network function (VNF) associated with flow processing and can offload at least some of the flow processing to a hardware accelerator. A module (e.g., TOR switch), external to the software-based processor and the hardware accelerator, examines packet flows and determines (e.g., using a top-K elephant-flow-detection algorithm) which ones are more suitable for offloading from the software-based processor to the hardware accelerator than others. The external module communicates the relative suitability for offloading to the CPU using packet tags or out-of-band messaging, and the CPU uses the relative suitability to determine which flows to offload or onload. In some implementations, the CPU can instruct the external module to change the value of K used in the algorithm.

Abstract: An example method of orchestrating a software-defined (SD) network layer of a virtualized computing system is described, the virtualized computing system including a host cluster, a virtualization management server, and a network management server each connected to a physical network, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes receiving, at the virtualization management server, a declarative specification describing a proposed state of an SD network for the host cluster, deploying, by the virtualization management server, virtualized infrastructure components in the host cluster in response to the proposed state in the declarative specification, and deploying, by the virtualization management server in cooperation with the network management server, logical network services supported by the virtualized infrastructure components in response to the proposed state in the declarative specification.

Abstract: An observation streamlining apparatus includes one or more computers each including a memory and a processor configured to discriminate between an observation-necessary time slot and an observation-unnecessary time slot with an intervention measure including at least a time when a predetermined intervention is performed on a user as an input, the observation-necessary time slot indicating a time slot when a user's action or state needs to be observed, and the observation-unnecessary time slot indicating a time slot when the user's action or state does not need to be observed; and execute predetermined processing for observing the user's action or state when the observation-necessary time slot arrives.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for user equipments and network components performing or assisting in packet filtering operations.

Abstract: Disclosed herein are systems, methods, and storage media for thwarting cyber-attacks and data theft. A computing system receives packets and compares with a configuration resource. The computing system determines that the packet does not match the configuration resource and transmits a packet to a decoy environment via an SDN switch. The decoy environment is configured to generate time-out, service unavailable, or restricted access messages. In some embodiments, the computing system determines the packet does match the configuration and transmits the packet to a production network via an SDN switch. The SDN switch is communicatively connected to the decoy environment through a first channel and communicatively connected to a production environment through a separate second channel. The computing system is further configured to create and transmit to the SDN switch, rules to manage transmitting the packet to either the decoy environment or the production environment.

Abstract: A reinforcement-learning based queue-management method for undersea networks. In one embodiment, a computer-implemented method to shape traffic in a dynamic network, comprising measuring network states, classifying each of a plurality of packets into one of a plurality of traffic types based on quality-of-service requirements, defining a decision epoch interval, determining a policy with a plurality of neural networks and with a deep reinforcement learning agent that maximizes entropy-regularized long-term reward and produces a plurality of weighted fair-queuing weights based on an observation of the state of the queues at the decision epoch intervals, and using the policy to allocate predefined portions of the available transmission bandwidth across the plurality of traffic types by defining each type with a WFQ weight.

Abstract: This application provides a BIER multicast traffic statistics collection method, a device, and a system. The method includes: A first network device obtains a first BIER packet. The first network device performs traffic statistics collection on the first BIER packet based on multicast flow information, to obtain a traffic statistics collection result of the first BIER packet, where the multicast flow information is used to identify a multicast flow to which the first BIER packet belongs. The first network device sends the multicast flow information and the traffic statistics collection result of the first BIER packet to a controller.

Abstract: A system and method for provisionally authenticating a host moving from a source port of a switch device to a destination port of the switch device is disclosed. The host is initially authenticated at the source port and blocked from forwarding network traffic at the destination port. During a provisional authentication session, an authentication agent executing on the switch intercepts one or more authentication packets sourced by the host and headed for the destination port of the switch device and redirects the authentication packets to an authentication server for validating the host at the destination port of the switch device. The switch device removes the block at the destination port in response to receiving an acknowledgment of successful authentication at the destination port from the authentication server.

Abstract: Methods, systems, and devices for providing for providing computer implemented services using managed systems are disclosed. To improve the likelihood of the computer implemented services being provided, a subscription based model may be used to manage the managed systems. The subscription model may utilize a highly accessible service to obtain information regarding capabilities of managed systems to present information regarding all potential solutions that the managed systems may provide. In some cases, subscription decisions may be based on inaccurate information. To reduce the impact of such decisions, entities that are more likely to have access to accurate information may elect to honor or reject subscription decisions made by entities that are more likely to have access to inaccurate information.

Abstract: Techniques are provided for a high availability solution (e.g., a network attached storage (NAS) solution) with address preservation during switchover. A first virtual machine is deployed into a first domain and a second virtual machine is deployed into a second domain of a computing environment. The first and second virtual machines are configured as a node pair for providing clients with access to data stored within an aggregate comprising one or more storage structures within shared storage of the computing environment. A load balancer is utilized to manage logical interfaces used by clients to access the virtual machines. During switchover, the load balancer preserves an IP address used to mount and access a data share of the aggregate used by a client.

Abstract: A security apparatus for a local network is in communication with an external electronic communication system and a first electronic device. The apparatus includes a memory device configured to store computer-executable instructions, and a processor in operable communication with the memory device. The processor is configured to implement the stored computer-executable instructions to cause the apparatus to determine a complexity score for the first electronic device, establish a behavioral pattern for the first electronic device operating within the local network, calculate a confidence metric for the first electronic device based on the determined complexity score and the established behavioral pattern, and control access of the first electronic device to the external communication system according to the calculated confidence metric.

Abstract: Methods, apparatus, and processor-readable storage media for resource scaling of microservice containers are provided herein. An example method includes determining a scaling value for at least one microservice of a plurality of microservices for a cluster of a container-based computing environment based on resource utilization information associated with incoming requests to the plurality of microservices and an amount of resources allocated to the cluster; in response to the at least one microservice exceeding the scaling value, reducing a number of resources utilized by the at least one microservice by storing one or more further incoming requests associated with the at least one microservice in a queue; and releasing one or more of the further incoming requests stored in the queue in response to determining that the one or more further incoming requests can be processed without the at least one microservice exceeding the scaling value.